Debian Bug report logs - #65901
qpopper: document required directory permissions

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Harry Edmon <harry@atmos.washington.edu>

To: submit@bugs.debian.org

Subject: in.qpopper in frozen cannot create file in /var/spool/pop

Date: Mon, 19 Jun 2000 09:39:13 -0700 (PDT)

Package: qpopper
Version: 2.53-5

I upgraded from slink to potato (aka frozen).  Now when I log into my pop server
I get the following message in the log file:

Jun 19 09:17:41 cardinal in.qpopper[13019]: Unable to open temporary maildrop
'/var/spool/pop/harry.pop': Permission denied (13)

The permissions on /var/spool/pop are the default 2775, which user root, group
mail.  From looking at a trace of the server, it appears that the program is
switching to become user "harry" without retaining group "mail", thus the
program cannot create the file in /var/spool/pop.  The problem appears to be in
pop_dropcopy.c  around line 818 - the call to "setgroups" should include "mail"
at this point.

I am using Debian 2.2, kernel version 2.2.15, i386.


--
Dr. Harry Edmon			E-MAIL: harry@atmos.washington.edu
(206) 543-0547			FAX:	(206) 543-0308
Dept of Atmospheric Sciences
University of Washington, Box 351640, Seattle, WA 98195-1640

Message #10 received at 65901@bugs.debian.org (full text, mbox, reply):

From: Harry Edmon <harry@atmos.washington.edu>

To: 65901@bugs.debian.org

Subject: I see my problem with qpopper

Date: Mon, 19 Jun 2000 12:11:37 -0700 (PDT)

I see what the problem is by looking at the code, it only works correctly if the
/var/spool/mail directory is set to group "mail".  Mine was set to group "root".
(Actually what it really needs is for the group ownership of /var/spool/pop to
match /var/spool/mail).  It would be nice to have a note about this in the
documentation, and to have the install script warn you if the group ownership of
the two directories does not match.

Thanks.


--
Dr. Harry Edmon			E-MAIL: harry@atmos.washington.edu
(206) 543-0547			FAX:	(206) 543-0308
Dept of Atmospheric Sciences
University of Washington, Box 351640, Seattle, WA 98195-1640

Message #15 received at 65901@bugs.debian.org (full text, mbox, reply):

From: Miquel van Smoorenburg <miquels@cistron.nl>

To: Harry Edmon <harry@atmos.washington.edu>, 65901@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: Bug#65901: I see my problem with qpopper

Date: Mon, 19 Jun 2000 22:26:03 +0200

severity 65901 wishlist
retitle 65901 qpopper: document required directory permissions
thanks

According to Harry Edmon:
> I see what the problem is by looking at the code, it only works correctly if the
> /var/spool/mail directory is set to group "mail".  Mine was set to group "root".
> (Actually what it really needs is for the group ownership of /var/spool/pop to
> match /var/spool/mail).  It would be nice to have a note about this in the
> documentation, and to have the install script warn you if the group ownership of
> the two directories does not match.

Why? That is the way debian installs it by default. If you chmod
/etc/passwd to mode 0, almost every package will fail - should they
all explicitly check for that ?

Anyway, I've retitled the bugreport and changed it into a
wishlist bug so that someone can fix it (after potato gets
released, I will orphan qpopper - I don't use it anymore).

Mike.

Message #28 received at 65901@bugs.debian.org (full text, mbox, reply):

From: Harry Edmon <harry@atmos.washington.edu>

To: 65901@bugs.debian.org

Subject: Re[2]: Bug#65901: I see my problem with qpopper

Date: Mon, 19 Jun 2000 13:48:07 -0700 (PDT)

When you put it that way, I agree.  It is definitely my fault. and it is not
something the install script needs to handle.  Feel free to remove it from the
wishlist if you want.

Thanks for the response.

Miquel van Smoorenburg <miquels@cistron.nl> wrote:
> severity 65901 wishlist
> retitle 65901 qpopper: document required directory permissions
> thanks
> 
> According to Harry Edmon:
> > I see what the problem is by looking at the code, it only works correctly if
> the
> > /var/spool/mail directory is set to group "mail".  Mine was set to group
> "root".
> > (Actually what it really needs is for the group ownership of /var/spool/pop
> to
> > match /var/spool/mail).  It would be nice to have a note about this in the
> > documentation, and to have the install script warn you if the group
> ownership of
> > the two directories does not match.
> 
> Why? That is the way debian installs it by default. If you chmod
> /etc/passwd to mode 0, almost every package will fail - should they
> all explicitly check for that ?
> 
> Anyway, I've retitled the bugreport and changed it into a
> wishlist bug so that someone can fix it (after potato gets
> released, I will orphan qpopper - I don't use it anymore).
> 
> Mike.


--
Dr. Harry Edmon			E-MAIL: harry@atmos.washington.edu
(206) 543-0547			FAX:	(206) 543-0308
Dept of Atmospheric Sciences
University of Washington, Box 351640, Seattle, WA 98195-1640

Message #41 received at 65901-close@bugs.debian.org (full text, mbox, reply):

From: Yu Guanghui <ygh@debian.org>

To: 65901-close@bugs.debian.org

Subject: Bug#65901: fixed in qpopper 4.0.3-9

Date: Mon, 01 Apr 2002 20:18:27 -0500

We believe that the bug you reported is fixed in the latest version of
qpopper, which is due to be installed in the Debian FTP archive:

qpopper-drac_4.0.3-9_i386.deb
  to pool/main/q/qpopper/qpopper-drac_4.0.3-9_i386.deb
qpopper_4.0.3-9.diff.gz
  to pool/main/q/qpopper/qpopper_4.0.3-9.diff.gz
qpopper_4.0.3-9.dsc
  to pool/main/q/qpopper/qpopper_4.0.3-9.dsc
qpopper_4.0.3-9_i386.deb
  to pool/main/q/qpopper/qpopper_4.0.3-9_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 65901@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Yu Guanghui <ygh@debian.org> (supplier of updated qpopper package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon,  1 Apr 2002 21:19:34 +0800
Source: qpopper
Binary: qpopper-drac qpopper
Architecture: source i386
Version: 4.0.3-9
Distribution: unstable
Urgency: low
Maintainer: Yu Guanghui <ygh@debian.org>
Changed-By: Yu Guanghui <ygh@debian.org>
Description: 
 qpopper    - Enhanced Post Office Protocol server (POP3).
 qpopper-drac - Qpopper with DRAC Support
Closes: 22008 22834 49122 57256 60016 65330 65901 85069
Changes: 
 qpopper (4.0.3-9) unstable; urgency=low
 .
   * Closed many old bugs, most of them has been fixed before.
   * lockfile has been put to /var/spool/pop (closes:bug#49122)
   * couldn't reproduce, and that more like fetchmail's bug.
     (closes:bug#57256). ok, this has been fixed in potato and new
     version hasn't this bug. (closes:bug#85069)
   * It has been fixed, but didn't close the bug. (closes:bug#65330)
   * Qpopper has a trace option now. (closes:bug#22008)
   * You can disable dns reverse lookup now. (closes:bug#22834)
   * APOP and PASS can work at sametime now. (closes:bug#60016)
   * It's not qpopper's failure. (closes:bug#65901)
Files: 
 4f53994e6c4c4d35e2a4b63bf96672ad 674 mail extra qpopper_4.0.3-9.dsc
 d3efda21a0aa044e57a24f0023e99d19 16023 mail extra qpopper_4.0.3-9.diff.gz
 7cff70d117325808333972ee0472f662 429838 mail extra qpopper_4.0.3-9_i386.deb
 55c07b5c6020c53ab47f10d9cc09441c 434008 mail extra qpopper-drac_4.0.3-9_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8qGRTKNPoKRflcycRArT4AKCzwNM8pvbEiZp/pB2YtgOfmOvIUgCgsnb/
bS5VB0rVs7r4kc4BXH9+TVg=
=NKXz
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.